75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d

General

Target
75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d
Size 4.1MB
Sample240516-3e2vbaec33
SHA256 75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d
MD5 988063bed4f706e05b96376915f07b52
SHA1 041223b6bfcfca6e60f3bb132baa77c5fea2e2d0
SHA512 d14e62649d653e67ac8f9079fef9564b6653419daf283ac9eac7913e26c5aedc72b4071383b5e5515768c204b328dbb3049d8b118eb3723f4590732cabdb6abd
SSDEEP 98304:JBY9z85IDEueBnM7HV1ZCi3qkeUZQkUcyc0rdgIXwT8j+R299ds96:LY9z2G9P11ZCi3jZQkUsIS8j+R299dsg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d

.exe 4.1MB

75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d

IMPHASH caa05f44f7576e372159bec163f68edb
SHA256 75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d
MD5 988063bed4f706e05b96376915f07b52
SHA1 041223b6bfcfca6e60f3bb132baa77c5fea2e2d0
SHA512 d14e62649d653e67ac8f9079fef9564b6653419daf283ac9eac7913e26c5aedc72b4071383b5e5515768c204b328dbb3049d8b118eb3723f4590732cabdb6abd
SSDEEP 98304:JBY9z85IDEueBnM7HV1ZCi3qkeUZQkUcyc0rdgIXwT8j+R299ds96:LY9z2G9P11ZCi3jZQkUsIS8j+R299dsg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

9b:e8:bc:22:d2:df:aa:a0:76:b4:fc:28:d5:74:58:ef:7d:41:41:93:0a:00:27:31:1c:bb:e3:8e:9f:ff:3e:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5251371f362b4011042b13043a2d223e0f19152c2014093e313d075d110f3d082e50,POSTALCODE=10700,ST=0b1c1115005f5c4e061704171b001d03091c1310114b0c1a02+ST=0b1c1115494a5c52100110515d52141b57170d14161d12025206141340084056005707170746501e16121203571c1452160c10121450010500175112041a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

1

Major OS version

5

Entry point

16493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA LoadLibraryExW InterlockedDecrement SetComputerNameW SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GetVolumeInformationA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GlobalMemoryStatus InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA SetConsoleOutputCP AddAtomA GlobalFindAtomW GetOEMCP GetModuleHandleA BuildCommDCBA VirtualProtect GetTempPathA SetFileAttributesW GetConsoleAliasW GetComputerNameA EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW CloseHandle WriteConsoleW SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

75af032205576d95ecf6414367d471ad5414fa56f7b2da4a4035d470444cc97d

PE Signature issue

kernel32

gdi32

generic